Every answer about your data, in one place.

• Profile details you enter at onboarding: first name, age range, gender, industry, role, language and avatar choice.
• Personality questionnaire answers, used only to personalize your practice scenarios.
• Practice activity: scenario attempts, the replies you type, the emotion words you choose, body check-in marks, scores, streaks and achievements.
• Optional photo if you ask for an AI-stylized avatar. The original photo is deleted after the stylized version is produced.
• Anonymous product analytics: page views and feature taps, without names or free text.
• Technical logs needed to run and secure the service: errors, latency, sign-in events.

We do not buy data about you, we do not sell your data, and we do not run advertising trackers.

• Contract performance: the core practice app, your progress history and your scores.
• Consent: optional features such as AI avatar stylization and the weekly digest email. You can withdraw consent at any time without losing access to the core app.
• Legitimate interest: security logging, abuse prevention and anonymous product analytics, balanced against your rights and minimized in scope.

For India-based users the same collection is covered by notice and consent under the DPDP Act, presented in clear language before any optional feature is switched on.

• Every body check-in and emotion question can be skipped; the practice still works without them.
• Optional AI features ask before they act. Declining never blocks the rest of the app.
• You can correct your profile, export your data, or delete your account from inside the app or by writing to us.
• Withdrawing consent stops future processing; it does not undo processing already done while consent was valid.
• Win-Win is not intended for people under 18 without verifiable parental consent.

• Generative AI writes the practice scenarios, the other person's replies, the coaching feedback and the narration voice. All of it is labelled as AI-generated where it appears.
• Your written replies are sent to enterprise AI providers under data-processing agreements solely to produce that session's content. They are not used to train third-party foundation models.
• No emotion recognition: the app never infers how you feel from your face, voice, typing pattern or any biometric signal. Emotions are only the words you choose yourself.
• No consequential decisions: the AI never decides anything about hiring, promotion, pay, ranking or discipline, and individual results are never shared with an employer.
• Human oversight: a person on our team reviews complaints about AI output and can correct the system.

We classify Win-Win as a limited-risk AI system with transparency duties. This is our own assessment, reviewed as the product changes. Read the full AI transparency notice.

• Active accounts: your data is kept while the account is in use.
• Inactive accounts: anonymized after 24 months unless you ask for earlier deletion.
• Deletion requests: personal identifiers are removed within 30 days; backups roll off within 90 days.
• Avatar source photos: deleted immediately after stylization.
• Anonymous analytics: aggregated and kept without personal identifiers.

Data is encrypted in transit and at rest. The primary user database is hosted with EU data residency for EU customers. A small set of sub-processors (managed database and auth, enterprise AI providers, text-to-speech, error monitoring) process limited data under data-processing agreements; the summary table lives on the trust page and a signed register is available on request.

Some enterprise AI and narration providers process prompts in the EU or the US under data-processing agreements with appropriate safeguards. Where data leaves the EU, transfers rely on adequacy decisions or standard contractual clauses. India-based customers can request a documented sub-processor map showing where their data physically sits.

• Access: a copy of the personal data we hold about you.
• Correction: fix anything inaccurate.
• Export: receive your data in a portable format.
• Deletion: erase your account and personal identifiers.
• Objection and restriction: object to processing based on legitimate interest, or ask us to pause processing while a question is resolved.
• Withdrawal of consent for optional features, at any time, with effect going forward.

To exercise any of these rights, write to info@yurify.co or use the team access form. We answer within 30 days. You also have the right to lodge a complaint with your local data protection authority; in Germany that is your Landesdatenschutzbehörde.

1. Write to info@yurify.co or use the contact form, and describe what happened. Include the screen you were on if the complaint concerns AI output.
2. We acknowledge your message within five working days.
3. A human on our team reviews the case. For AI output complaints we check the exact text or audio you saw, not a regenerated version.
4. We reply with an outcome: an explanation, a correction, a deletion, or a change to the system when the complaint is fair.
5. If you are not satisfied, you can escalate to your data protection authority at any time. You do not need to wait for us first.